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Abstract 

This paper establishes the utility of user cooperation in facilitating secure wireless communications. 
In particular, the four-terminal relay-eavesdropper channel is introduced and an outer-bound on the 
optimal rate-equivocation region is derived. Several cooperation strategies are then devised and the 
corresponding achievable rate-equivocation region are characterized. Of particular interest is the novel 
Noise-Forwarding (NF) strategy, where the relay node sends codewords independent of the source 
message to confuse the eavesdropper. This strategy is used to illustrate the deaf helper phenomenon, 
where the relay is able to facilitate secure communications while being totally ignorant of the transmitted 
messages. Furthermore, NF is shown to increase the secrecy capacity in the reversely degraded scenario, 
where the relay node fails to offer performance gains in the classical setting. The gain offered by the 
proposed cooperation strategies is then proved theoretically and validated numerically in the additive 
White Gaussian Noise (AWGN) channel. 

I. Introduction 

Shannon introduced the notion of information theoretic secrecy in [1]. The model in [1] 
assumed that the transmission is noiseless, and used a key K to protect the confidential message 
W. Taking the transmission uncertainty into consideration, Wyner introduced the wiretap channel 
in [2]. In the three-terminal wiretap channel, a source wishes to transmit confidential messages to 
a destination while keeping the messages as secret as possible from a wiretapper. The wiretapper 
is assumed to have an unlimited computation ability and to know the coding/decoding scheme 
used in the main (source-destination) channel. Under the assumption that the source-wiretapper 
channel is a degraded version of the main channel, Wyner characterized the trade-off between 
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the throughput of the main channel and the level of ignorance of the message at the wiretapper 
using the rate-equivocation region concept. Loosely speaking, the equivocation rate measures the 
residual ambiguity about the transmitted message at the wiretapper. If the equivocation rate at the 
wiretapper is arbitrarily close to the information rate, the transmission is called perfectly secure. 
Csiszdr and Korner extended this work to the broadcast channel with confidential messages, 
where the source sends common information to both the destination and the wiretapper, and 
confidential messages are sent only to the destination [3]. 

Our work here is motivated by the fact that if the wiretapper channel is less noisy than the main 
channel! the perfect secrecy capacity of the channel is zero [3], In this case, it is infeasible 
to establish a secure link under Wyner's wiretap channel model. Our main idea is to exploit 
user cooperation in facilitating the transmission of confidential messages from the source to the 
destination. More specially, we consider a four-terminal relay-eavesdropper channel, where a 
source wishes to send messages to a destination while leveraging the help of a relay node to 
hide those messages from the eavesdropper. The eavesdropper in our model can be viewed as 
the wireless counterpart of Wyner's wiretapper. This model generalizes the relay channel [4] and 
the wiretap channel [2]. 

The relay channel without security constraints was studied under various scenarios [4]— [12]. 
In most of these works, cooperation strategies were constructed to increase the transmission 
rate and/or reliability function. In this paper, we identify a novel role of the relay node in 
establishing a secure link from the source to the destination. Towards this end, several cooperation 
strategies for the relay-eavesdropper channel are constructed and the corresponding achieved rate- 
equivocation regions are characterized. An outer-bound on the optimal rate-equivocation region 
is also derived. The proposed schemes are shown to achieve a positive perfect secrecy rate in 
several scenarios where the secrecy capacity in the absence of the relay node is zero. Quite 
interestingly, we establish the deaf-helper phenomenon where the relay can help while being 
totally ignorant of the transmitted message from the source. Furthermore, we show that the 
relay node can aid in the transmission of confidential messages in some settings where classical 
cooperation fails to offer performance gains, e.g., the reversely degraded relay channel. Finally, 

'The source- wiretapper channel is said to be less noisy than the source-receiver channel, if for every V — > X — » YZ, 
I(V;Z) > I(V;Y), where X is the signal transmitted by the source, Y, Z are the received signal of the receiver and the 
wiretapper respectively. 
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we observe that the proposed Noise-Forwarding (NF) is intimately related with the multiple 
access channel with security constraints, as evident in the sequel. 

At this point, we wish to differentiate our investigation from earlier relevant works. The relay 
channel with confidential messages was studied in [13], [14], where the relay node acts both as 
an eavesdropper and a helper. In the model of [14], the source sends common messages to the 
destination using the help of the relay node, but also sends private messages to the destination 
while keeping them secret from the relay. In contrast with [14], the relay node in our work acts 
as a trusted "third-party" whose sole goal is to facilitate secure communications (imposing an 
additional security constraint on the relay node is also considered in Section HVl) . The idea of 
using a "third-party" to facilitate secure communications also appeared in [15]. Contrary to our 
work, which considers noisy channels, [15] focused on the generation of common random secret 
keys at two nodes under the assist of a third-party using a noiseless public discussion channel. The 
users then use the secret key to establish a secure link between the source-destination pair. Other 
recent works on secure communications investigated the multiple access channel (MAC) with 
confidential messages [16], [17], the multiple access channel with a degraded wiretapper [18], 
and MIMO secure communications [19]. In summary, it appears that our relay-eavesdropper 
model is fundamentally different from the models considered in all previous works. 

Throughout the paper, upper-case letter X denotes a random variable, lower-case letter x 
denotes a realization of the random variable, calligraphic letter X denotes a finite alphabet set. 
Boldface letter x denotes a vector, {-} T denotes transpose and {-} H denotes conjugate transpose. 
We also let [x} + = max{0,x}. 

The rest of the paper is organized as follows. In section [III we introduce the system model 
and our notations. Section [HI] describes the proposed cooperation strategies and characterizes 
the corresponding achievable performance. The rate-equivocation outer-bound is also developed 
in this section. In Section [TV] we discuss several examples that illustrate interesting aspects of 
the relay-eavesdropper channel. Finally, Section |V] offers some concluding remarks and briefly 
outlines possible venues for future research. 

II. The Relay-Eavesdropper Channel 

We consider a four-terminal discrete channel consisting of finite sets X 1 , X 2 , y, 3^i, 3^2 an d a 
transition probability distribution yi, y 2 |xi, x 2 ), as shown in Figured] Here, Xi,X 2 are the 
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channel inputs from the source and the relay respectively, while y, 3^i, y 2 are the channel outputs 
at the destination, relay and eavesdropper respectively. We impose the memoryless assumption, 
z'.e., the channel outputs (yi,yi,i,y 2) i) at time i only depend on the channel inputs (xi^x^i) at 
time i. The source wishes to send the message W\ € Wi = {1, • ■ ■ , M} to the destination using 
the (M, n) code consisting: 1) a stochastic encoder /„ at the source that maps the message iwi 
to a codeword xi G X™, 2) a relay encoder that maps the signals {yx,\, yi, 2 , ••• , 2/i,t-i) received 
before time z to the channel input x 2ji , using the mapping (p£. (Y 1 i,Y 12 , ■ ■ ■ , Yi,i-x) ~^ X 2j i, 3) 
a decoding function <p: y n — > W\. The average error probability of a (M,n) code is defined as 

P " = A7 Pr ^( y ) ^ ^il^i was sent i- C 1 ) 



toi eWi 



The equivocation rate at the eavesdropper is defined as 



Ftp 



-H(W 1 \Y 2 ). 
n 



(2) 



relay 



encoder 



p(y,y.,y. I x x ) 



decoder 



w,. 



eavesdropper 



Fig. 1: The relay eavesdropper channel. 
The rate-equivocation pair (Ri,R e ) is said to be achievable if for any e > 0, there exists a 
sequence of codes (M, n) such that for any n > n(e), we have 



Ri = 

PI 1 < r 



- log 2 M, 

n 



-H(W 1 \Y 2 ) > R e -e. 



n 



(3) 
(4) 
(5) 



We further say that the perfect secrecy rate R\ is achievable if the rate-equivocation pair 
(Ri, Ri) is achievable. Notice that if Y 2 = <p (or some other constant), our model reduces to the 
classical relay channel without security constraints. 
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III. Main Results 

Our first result establishes an outer-bound on the optimal rate-equivocation region of the 
relay-eavesdropper channel. 

Theorem 1: In the relay eavesdropper channel, for any rate-equivocation pair {Ri,R e } with 
P e n — > and the equivocation rate at the eavesdropper larger than R e — e, there exist some 
random variables U — > (Vi,V 2 ) — > (X ll X 2 ) — > (Y,Yx,Y 2 ), such that (R 1 , R e ) satisfies the 
following conditions 

R 1 < min{I(V 1 ,V 2 ;Y),I(V 1 ;Y,Y 1 \V 2 )}, 

Re < Rl , 

Re < [I(V U V 2 ;Y\U) - I{V^V 2 -Y 2 \U)} + . (6) 
Proof: Please refer to Appendix H ■ 
We now turn our attention to constructing cooperation strategies for the relay-eavesdropper 
channel. Our first step is to characterize the achievable rate-equivocation region of Cover-El 
Gamal Decode and Forward (DF) Strategy [4]. In DF cooperation strategy, the relay node will 
first decode codewords and then re-encode the message to cooperate with the source. Here, we 
use the regular coding and backward decoding scheme developed in the classical relay setting [7], 
[20], with the important difference that each message will be associated with many codewords 
in order to confuse the eavesdropper. 

Theorem 2: The rate pairs in the closure of the convex hull of all (R±, R e ) satisfying 

Ri < minU^^y),/^;^)}, 

Re < Rl, (7) 

R e < [min{I(V 1 ,V 2 ;Y),I(V 1 ;Y 1 \V 2 )}-I(V 1 ,V 2 ;Y 2 )} + , 

for some distribution p(vi, v 2 , x 1} x 2 , y 1} y 2 , y) = p(vi,v 2 )p(x 1 ,x 2 \vi,v 2 )p(y 1 ,y 2 ,y\x 1 ,x 2 ), are 
achievable using the DF strategy. 

Hence, for the DF scheme, the following perfect secrecy rate is achievable 

Rf F ^= sup [mm{I(V 1 ,V 2 ;Y),I(V 1 -,Y 1 \V 2 )}-I(V 1 ,V 2 ,Y 2 )} + . (8) 
Proof: Please refer to Appendix [III ■ 
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The channel between the source and the relay becomes a bottleneck for the DF strategy 
when it is noisier than the source-destination channel. This motivates our Noise-Forwarding (NF) 
scheme, where the relay node does not attempt to decode the message but sends codewords that 
are independent of the source's message. The enabling observation behind this scheme is that, in 
the wiretap channel, in addition to its own information, the source should send extra codewords 
to confuse the wiretapper. In our setting, this task can be accomplished by the relay by allowing 
it to send independent codewords, which aid in confusing the eavesdropper. 




1(X,;Y IX,) < I(X,;Y 2 IX,) I(X,;Y\ X 2 ) > 1(X,;Y, I X 2 ) 



Fig. 2: The rate region of the compound MACs of the relay eavesdropper channel for a fixed 
input distribution p(xi)p(x 2 ). 

Our NF scheme transforms the relay-eavesdropper channel into a compound multiple access 
channel (MAC), where the source/relay to the receiver is the first MAC and source/relay to the 
eavesdropper is the second one. Figure [2] shows the rate region of these two MACs for a fixed 
input distribution p(xi)p(x 2 ) . In the figure, Ri is the codeword rate of the source, and R 2 is 
the codeword rate of the relay. We can observe from Figure 2a) that if the relay node does not 
transmit, the perfect secrecy rate is zero for this input distribution since Ri(A) < Ri(C). On 
the other hand, if the relay and the source coordinate their transmissions and operate at point 
B, we can achieve the equivocation rate R e , which is strictly larger than zero. On the other 
hand, in Figure 2b), we can still get a positive perfect secrecy rate by operating at point A in 
the absence of the relay. But by moving the operating point to B, we can get a larger secrecy 
rate. This illustrates the main idea of our Noise-Forwarding scheme. The next result establishes 
the achievable rate-equivocation region for the NF scheme. 
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Theorem 3: The rate pairs in the closure of the convex hull of all (Ri, R e ) satisfying 

R 1 < /(Vi;y|y 2 ), 

Re < Ri, (9) 
R e < Y\V 2 ) + mm{I(V 2 ; Y),I(V 2 ; Y 2 \V X )} - min{7(y 2 ; Y),I(V 2 ; Y 2 )} - 7(V i; Y 2 \V 2 )} + , 

for some distribution p(vx,v 2 ,Xi,x 2 ,y 1 ,y 2 ,y) = p(v 1 )p(v 2 )p(x 1 \v 1 )p(x 2 \v 2 )p(y 1 ,y 2 ,y\x 1 , x 2 ), 
are achievable using the NF scheme. 

Hence, for the NF scheme, the achievable perfect secrecy rate is 

R(m = SU p [/(F i; y|y 2 ) + min{7(y 2 ;y), 7(^5^1^)} 

p(yi)p(v2) 

- min{/(y 2 ; F), 7(y 2 ; F 2 )} - I{V x] Y 2 \V 2 )} + . (10) 
Proof: Please refer to Appendix [TTTJ ■ 
The following comments are now in order. 

1) The NF scheme is customized to the relay channel with security constraints which make 
the transmission of codewords that are independent of the source message reasonable. 
Also, in the NF scheme, the relay node does not need to listen to the source, and hence, 
this scheme is more suited works for relay nodes limited by the half-duplex constraint [9], 
[11], [21]. 

2) In NF cooperation, each user sends independent messages to the destination, which resem- 
bles the MAC. Hence, NF cooperation can be adapted to the multiple access eavesdropper 
channel where the multiple users in the MAC channel can help each other in communi- 
cating securely with the destination without listening to each other (note that the results 
in [18] were limited only to the case where the eavesdropped channel is a degraded version 
of the channel seen by the destination). Our related results will be reported elsewhere. 

Now, we study another cooperation scheme that does not require decoding at the relay: 
Compress and Forward (CF). The CF cooperation strategy can be viewed as a generalization of 
NF where, in addition to the independent codewords, the relay also sends a quantized version of 
its noisy observations to the destination. This noisy version of the relay's observations helps the 
destination in decoding the source's message, while the independent codewords help in confusing 
the eavesdropper. The following result establishes the achievable rate-equivocation pair in the 
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case when I(Xi,Yi,Y\X 2 ) < I(Xi,Yi,Y 2 \X 2 ), i.e., the source-eavesdropper channel is better 
than the source-receiver channel, a situation of particular interest to us. 

Theorem 4: The rate pairs in the closure of the convex hull of all (R x , R e ) satisfying 

R-y < I(X X ;%Y\X 2 ), 

Re < Rl, (11) 



R P < 



R + I(X i; Yi, Y\X 2 ) - I{X U X 2] Y 2 ) 



subject to 



min{I(X 2 ; Y),I(X 2 ; Y 2 \X 1 )} - R Q > I{Y x] Y 1 \X 2 ), (12) 

for some distribution p(xi, x 2 , y x , y 2 , y, yi) = p(xi)p(x 2 )p(y 1 , y 2 , y\x x , x 2 )p(yi\yi, x 2 ), are achiev- 
able using CF strategy. 

Proof: Please refer to Appendix [IV] ■ 
Three comments are now in order. 

1) In Theorem SI R is the rate of pure noise generated by the relay to confuse the eavesdrop- 
per, while min{/(X 2 ; Y), I(X 2 ; Y 2 \Xi)} — Ro is the part of the rate allocated to send the 
compressed signal Yi to help the destination. If we set R = min{I(X 2 ; Y), I(X 2 ; F 2 |^i)}, 
this scheme becomes the NF scheme. 

2) In order to enable analytical tractability, the coding/decoding scheme used in the proof is 
slightly different from that of [4]. In [4], the destination uses sliding-window decoding, 
while our proof uses backward decoding. Hence, the bound for R e provided here is a 
lower-bound for the R e achieved by the CF scheme. One may be able to achieve a larger 
R e using exactly the CF scheme proposed in [4]. But, unfortunately, we are not yet able 
to bound R e when sliding-window decoding is used. 

3) Compared with CF decoding, the proposed NF strategy enjoys the advantage of simplicity. 
Also, if one only focuses on the perfect secrecy rate, it is easy to see that these two schemes 
achieve identical performance. Again, this observation is limited to our lower bound on 
R e in Theorem 0] 

IV. Examples 

This section discusses several examples that illustrate some unique features of the relay- 
eavesdropper channel. For simplicity, we only focus on the perfect secrecy rate of various 
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schemes. 



A. The Deaf Helper Phenomenon 

The security constraints imposed on the network bring about a new phenomenon which we 
call the deaf helper phenomenon, where the relay node can still help even it is totally ignorant 
of the message transmitted from the source. In this setup, we impose an additional security 
constraint on the relay node, and say a rate R s is achievable for a deaf helper if for any e > 0, 
there exists a sequence of codes (M,n) such that for any n > n(e), we have 

R s = -log 2 M, P;<e, 
n 

-H(W l \Y 2 ) > R s -e, -H(W 1 \Y 1 ,X 2 )>R 8 -e. (13) 

n n 

In this case, the signal received by the relay node does not leak any information about the 
transmitted message W\. This model describes a more conservative scenario where the source 
does not trust the relay but still wishes to exploit the benefit brought by cooperation. We assume 
that the relay node is not malicious and, hence, is willing to cooperate with the sourcaj. The 
following theorem characterizes the achievable perfect secrecy rate of the NF strategy in the 
deaf-helper setting. 

Theorem 5: The perfect secrecy rate of the NF scheme with an additional security constraint 
on the relay node is R s = max min{i? sl , R s2 }, where 

Rs! = [l(V i; Y\V 2 ) + mm{I(V 2 ; Y), I(V 2 ; Y 2 \V X )} - min{/(F 2 ; Y), I(V 2 ; Y 2 )} - I(V i; Y 2 \V 2 )] 

Rs2 = [I{V!-Y\V 2 )-I{V!-Y!\X 2 )] + . 

Proof: Please refer to Appendix |Vl ■ 

B. The Reversely Degraded Relay-Eavesdropper Channel 

In the classical relay channel without security constraints, there exist some scenarios where 
the relay node does not provide any gain, for example, the reversely degraded relay channel 
shown in [4]. Here, we focus on this scenario and show that the relay node can still offer a gain 
in the presence of the eavesdropper. 

2 If the relay node is malicious, it can then send signals that are dependent with signal received and then could even block 
the transmission of the main channel. 
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Definition 1 ( [4]): The relay channel is called reversely degraded, if p(y, yi\xi, x 2 ) = p(y\xi, x 2 ) 
p(yi\y,x 2 ). 

The following result, borrowed from [4], states the capacity of the classical reversely degraded 
relay channel. 

Theorem 6 (Theorem 2, [4]): The capacity of the reversely degraded relay channel is 

Co = maxmax/(Ji; Y\x 2 ). (14) 
This result implies that the relay node should send a constant, and hence, does not contribute 
new information to the destination. In most channel models, the constant sent by the relay does 
not result in any capacity gain. The question now is whether the same conclusion holds in the 
presence of an eavesdropper. We first observe that the degradedness of the relay channel implies 
that DF and CF cooperation will not provide the destination with additional useful information. 
The relay node, however, can still send codewords independent of the received signal to confuse 
the eavesdropper, as proposed in the NF scheme. Since we do not require decoding at the relay 
node in the proof of Theorem [3l the degradedness imposed here does not affect the performance. 
Hence, we get the following achievable perfect secrecy rate for the reversely degraded relay- 
eavesdropper channel. 

Corollary 1: The achievable perfect secrecy rate of the reversely degraded relay eavesdropper 
channel is 

R s = max [/(Vi^l^+minf/^jy),/^;^!^)} 

p(i)i)p(i) 2 ) 

- mm{I(V 2 ; Y), I(V 2 ; Y 2 )} - I(V r , Y 2 \V 2 )} + . (15) 

C. The AWGN Channel 

Now we consider the Gaussian relay-eavesdropper channel, where the signal received at each 
node is 

VA n \ = ^2 h ij X il n ) + %M> 
i¥=3 

here hy is the channel coefficient between node i E {s, r} and node j E {r, w, d}, and Zj is the 
i.i.d Gaussian noise with unit variance at node j. The source and the relay have average power 
constraint Pi , P 2 respectively. 
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In [22], it was shown that the secrecy capacity of the degraded Gaussian wiretap channel is 
[Cm — Cmw] + , where Cm,Cmw are the capacity of the main channel and wiretap channel, 
respectively. This result is also shown to be valid for stochastically degraded channel [17]. In 
our case, if the relay does not transmit, the relay eavesdropper channel becomes a Gaussian 
eavesdropper channel, which can always be converted into a stochastically degraded chan- 
nel as done in the Gaussian broadcast channel [23]. Applying this result to our case, the 
secrecy capacity of the Gaussian eavesdropper channel without the relay node is given by 
[|log 2 (l + \h s d\ 2 P\) — |log 2 (l + \h sw \ 2 Pi)\ + . Hence if \h sw \ 2 > \h sd \ 2 and the relay does not 
transmit, the secrecy capacity is zero, no matter how large Pi is. On the other hand, as shown 
later, the relay can facilitate the source-destination pair to achieve a positive perfect secrecy rate 
under some conditions even when \h sw \ 2 > \h sd \ 2 . In the following, we focus on such scenarios. 

1 ) DF and NF: At this point, we do not know the optimal input distribution that maximizes 
Ri DF \ R,i NF \ Here, we let Vi — X 1 ,V 2 — X 2 and use a Gaussian input distribution to obtain 
an achievable lower bound. 

For DF cooperation scheme, we let X 2 ~ A/"(0, P 2 ), X 10 ~ JV(0, P), where jV(0, P) is the 
Gaussian distribution with zero mean and variance P. Also, we let 

X\ = c\X 2 + Xlo, 

where c\ is a constant to be specified later. In this relationship, the novel information is modelled 
by X w , whereas X 2 represents the part of the signal which the source and the relay cooperate 
in beamforming towards the destination. To satisfy the average power constraint at the source, 
we require |cx| 2 P 2 + P < Pi- 

Straightforward calculations result in 

I(X 1 ;Y 1 \X 2 ) = ilog 2 (l + |/i sr | 2 P), 

I{X U X 2 -Y) = ±\ g 2 (l + \h sd c 1 + h rd \ 2 P 2 + \h sd \ 2 P), 

I(X U X 2 ;Y 2 ) = ^log 2 (l + \h swCl + h rw \ 2 P 2 + \h sw \ 2 P). 



Hence, we have 



Rf F ) = max 

C1,P 



. fl, / l + \h sr \ 2 p \ 

111 12 ° g2 VI + + h rw \>P 2 + \h sw \>P) ' 

l l ° g2 (l 



1 + \h sd ci + h rd 


2 P 2 + 


h sd \ 


2p 


1 + 1 




2 P 2 + 


h 


\ 2 P 



(16) 
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For NF, we let X 1 ~ jV(0, Pi), X 2 ~ J\f(0, P 2 ). Here X 1; X 2 are independent, resulting in 

/(x i; y|x 2 ) = ^io g2 (i + |/ isd | 2 F 1 ), 

I{X 1 ,X 2 ;Y)-I{X 1 ,X 2 ;Y 2 ) = l - log 2 

J(X 2 ; F.IXO + J(X i; y|X 2 ) - I{X U X 2 ; Y 2 ) = \ log 2 { ^rf^vM^ 



1 + 


hsd 


2 P1 + 


ft-rd 


2 P 2 \ 


1 + 


h 

1 ''SW 


2 P1 + 


h rw 


2 p 2 ; 



Hence, we have 

R{ NF ^ 



1 + 


h s d 


2 Pi + 


h r d 


2 P 2 \ 


1 + 


hsw 


2 Pi + 


hrw 


2 pJ 



(1 + 1 


h 1 
'™ i 


2 P 2 )(1 + 


hsc 


| 2 A) 


1 + 


1ft 


I 2 P1 + 


ft 


rw | 


2 P 2 



mm | i i og2 (i + ift sd | 2 P!) , i i og2 ( : : ,'r a ; 9 v : ) , ( i7 ) 

^log 2 

2) Amplify and Forward: In this subsection, we quantify the achievable secrecy rate of 
Amplify and Forward (AF) cooperation!]. In AF, the source encodes its messages into codewords 
with length ML each, and divides each codeword into L sub-blocks each with M symbols, where 
L is chosen to be sufficiently large. At each sub-block, the relay sends a linear combination of 
the received noisy signal of this sub-block so far. For simplicity, we limit our discussion to 
M = 2. In this case, the source sends Xi(l) at the first symbol interval of each sub-block, 
the relay receives Yi(l) = ft sr Xi(l) + Zi(l); At the second symbol interval, the source sends 
aXi(l) + /3X\(2), while the relay sends 7^(1). Here a,/3, 7 are chosen to satisfy the average 
power constraints of the source and the relay. Thus, this scheme allows beam-forming between 
the source and relay without requiring the relay to fully decode. 

Writing the signal received at the destination and the eavesdropper in matrix form, we have 



Y = HxXx + Z, Y 2 = H 2 X! + Z 2 , 



(18) 



where 



hsd 
(3h sd + jh sr h rd ah sd 



H 2 



f3h sw + jh sr h r 





ah s ., 



X 1 = [X 1 (1),X 1 (2)] T ,Z= [Z(l), 1 h rd Z 1 (l) + Z(2)f,Z 2 = [Z 2 (l), 7ft™^i(l) + Z 2 (2)] T , 

y= [y(i),y(2)] T ,Y 2 = [y 2 (i),y 2 (2)] T . (19) 



We did not consider this scheme in the discrete case since, in general, it does not lend itself to a single letter characterization. 
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The channel under consideration can be viewed as an equivalent standard memoryless eavesdrop- 
per channel with input Xi and outputs Y, Y 2 at the destination and the eavesdropper respectively. 
Then, based on the result of [3], an achievable perfect secrecy rate is [/(Xi; Y) — /(Xi; Y 2 )] + . 

Choosing a Gaussian input with covariance matrix E{XX ff } = PI, where I is the identity 
matrix, we get the following perfect secrecy rate 



max 



max 



1 IdetjPHxHf + E{ZZ g }}| 
4 ° g2 |det{E{ZZ^}}| 

1 IdetjPHxHf + A}detB| 
4 ° g2 |det{PH 2 H^ + B}det A| 



4 



log 2 



det{PH 2 H^ + E{Z 2 Z^}}| 



det{E{Z 2 Z^}}| 



where 



A 



l 

1 





\lh rd \ 2 



B 



1 

1 





\jh r 



and the maximization is over the set of power constraints: 



:i + \ar + 



)P < 2P U 



h\\\h sr \ 2 P + l)<2P 2 . 



(20) 



(21) 




-•- Upper Bound 

— Decode and Forward 

-•— Amplify and Forward 

Noise-Forwarding 
--No Relay 



Fig. 3: The achievable perfect secrecy rate of the proposed schemes in the Gaussian relay 
eavesdropper channel. 

3) Numerical Results: In this subsection, we give numerical results under two channel models. 
The first is the real channel where hy = dj? ' , with dij being the distance between node i and 
j and 7 > 1 is the channel attenuation coefficient. In the second model, we assume that each 
channel experiences an independent phase fading, that is hy = dj?e? 6ii , where 6^ is uniformly 
distributed over [0,27r). We believe that the second model is more practically relevant than the 
real channel scenario. 



February 1, 2008 



DRAFT 



14 



eavesdropper 
(0,1) 



source 
(0,0) 



relay 

(x,0) 
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Fig. 4: The network topology. 



Figure [3] shows the achievable perfect secrecy rate of the proposed schemes for the first 
channel model. In generating this figure, we use the network topology shown in Figure HI 
where we put the source at (0,0), the destination at (1,0), the eavesdropper at (0,1), and the 
relay node at (x, 0). We let Pi — \,P% — 8. Since d s d = d sw , the perfect secrecy capacity of 
the eavesdropper channel without the relay node is zero. But, as shown in the figure, we can 
achieve a positive secrecy rate by introducing a relay node. In computing the upper-bound, we set 
V\ ~ A/"(0, Pi), V 2 ~ A/"(0, P 2 ) with a correlation coefficient p, and maximize over p E [—1,1]. 
Notice that the Gaussian input is not necessarily optimal for the upper-bound. We can see that, 
when the relay is near the source, the DF scheme touches the Gaussian upper-bound. Also, 
when x > 1, it is clear that DF cooperation does not offer any gain, while NF and AF still 
offer positive rates. Notice that when x > 1, both d sr ,d s d are larger than d sw . The interesting 
observation here is that though both the destination and relay are in disadvantage positions 
compared with the eavesdropper, they can cooperate with each other and gain some advantage 
over the eavesdropper. If the relay is at 0, our model is equivalent to the case where the source 
has two antennas. Notice that the upper-bound of the perfect secrecy capacity is zero under this 
scenario. Hence, increasing the number of transmitting antenna at the source does not increase 
the secrecy capacity under the real channel model. On the other hand, if there is a relay node at 
an appropriate position, we can exploit this relay node to establish a secure source-destination 
link. 

In the second scenario, we assume that before transmission, the source knows the phases 
S r, Qsd, @rd, but does not know 9 SW , 6 rw . The random phase will not affect the achievable perfect 
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Fig. 5: The achievable perfect secrecy capacity for various schemes in the Gaussian relay 
eavesdropper channel with phase fading. 

secrecy rate of NF since it does not depend on beam-forming between the source and relay. 
But, the rates of DF and AF are different here. In both cases, the source can adjust its phase 
according to the knowledge of the phase information about 6 sr , 6 s d, Q r d- In this way, the signals 
of the source and the relay will add up coherently at the destination, but not at the eavesdropper 
since 9 sw ,6 rw are independent of sd ,9 rd ,6 sr . The secrecy rate of DF and AF could then be 
obtained by averaging (fl6l) . (T20l) over the random phases. Figure \5\ shows the achievable perfect 
secrecy rates of the proposed strategies for the same setup as the first scenario. Due to the 
random phases, the achievable perfect secrecy capacity when the relay is at the same position as 
the source is not zero anymore. In this case, it will be beneficial to have multiple transmitting 
antennas at the source. Similar to the first scenario, when x > 1, DF cooperation does not offer 
any benefit. But both NF and AF still enjoy non-zero secrecy rates. 

V. Conclusions 

In this paper, the relay-eavesdropper channel was studied. In particular, several cooperation 
strategies were proposed and the corresponding achievable performance bounds were obtained. 
Furthermore, an outer-bound on the optimal rate-equivocation region for this channel was devel- 
oped. Of particular interest is the proposed NF strategy which was used to illustrate the deaf- 
helper phenomenon, and to demonstrate the utility of the relay node in the reversely degraded 
relay-eavesdropper channel. Overall, our results establish the critical role of user cooperation in 
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facilitating secure wireless communications and shed light on the unique feature of the relay- 
eavesdropper channel. 

Among the many open problems posed by our work, how to close the gap between the 
achievable performance and the outer-bound is arguably the most important one. This problem 
is expected to be challenging since the capacity of the classical relay channel remains unknown. 
The investigation of the role of feedback in the relay-eavesdropper channel is another interesting 
problem. In the relay channel without security constraints, noiseless/noisy feedback was shown 
to be beneficial. On the other hand, in the presence of an eavesdropper, the role and optimal 
mechanism of feedback is not yet known, since the eavesdropper could also benefit from the 
feedback signal. Finally, extending our work to a large scale network is expected to be of practical 
significance. 

Appendix I 
Proof of Theorem CD 

The proof follows that of [3]. 

nR e = (22) 
= H(W 1 ) - I{W 1 ;Y 2 n ) (23) 
= IiWiX 1 ) -I(Wi;Y?) +H(W l \Y n ) (24) 

n 

< nY 1 - 1 ) - I{W r - Y 2<i \Y 2 n >i+l )} + nS n , (25) 

i=i 

where Y^ 1 = Y(l, ■ ■ ■ ,i — 1), F 2 n - +1 = Y 2 (i + 1, • • • ,n), and 5 n — > as n — > oo. We get this 
by using the chain rule to expand I(Wi,Y n ) from i — 1 and expand IiW^Y^) from i = n, 
also we use the Fano's inequality to bound H(W 1 \Y n ). 
We continue 

n 

nR e < ^[/(iy 1 ;y i |y i - 1 )-/(iy 1 ;y 2 , i |y^ +1 )] + n^ (26) 
1=1 

n 

= ^[/(^ 1 ,y^ +1 ;y,|y- 1 )-/(y^ +i; y i |r- 1 ,^ 1 ) (27) 
i=i 

-/(Wi, y*" 1 ; Y 2>i \Y 2 n >i+1 ) + /(y*- 1 ; Y 2;i \Y% +1 , W 1 )} + n6 n (28) 

n 

= Y)I{W 1} Yi IY*" 1 ) - HWuY 1 - 1 ; Y 2ji \Y 2 n >i+1 )] + n5 n , (29) 
i=i 
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n n 

since E I(Y" i+1 ; y^ -1 , Wi) = E J ( y<_1 ; y 2,i|^i+i, V^i), which is proved in the lemma 7 

i=i / i 

of [3]. Now 

n 

nR e < ^[/(^ 1 ,l^ i+1 ;y i |y i - 1 )-/(W 1 ,Y*- 1 ;y 2ii |l^ +1 )]+n(J n (30) 
i=i 

i=l 

-/(y*- 1 ; y 2li |y^ +1 ) - y^y*- 1 , y£ +1 )] + n5 n (3i) 
= y ir- 1 , y 2 " m ) - y,^- 1 , y£ +1 )] + n5 n , (32) 



since E J(*2i+i; yl^ -1 ) = E ^(^ <-1 l ^2,i|^Ti+i). which is also proved in [3]. 
i=i i=i 
Now, let J be a random variable uniformly distributed over {1, • • • , n}, set U = jy i_1 y 2 " +1 ,Vi 

JY^i+tWu V 2 = JY l -\ y = Y ltJ , y 2 = y 2iJ , Y = Yj, X 1 = X hJ , X 2 = X 2J we have 

R e < - f>(^i; y \y*-\ y™ +1 ) - i(w i; y 2>i | y*-\ y£ +1 )] + s n 



n . 
i=i 



= ^ i>(^> ^ ^l^" 1 , ^ + i) - HWi, y*- 1 , y 2 ™ +1 ; y,!^- 1 , y£ +1 )] + * n 
i=i 

= /(y 1 ,y 2 ;y|c/)-/(y 1 ,y 2 ;y 2 |c/) + 5 n . (33) 



Since the channel is memoryless, one can then check that U — > (Vi,V 2 ) — > (Xi,X 2 ) — > 
(y y, y 2 ) is a Markov chain. In the following, we bound Ri. 

n 

/(w i; y) = ^/(ly^yir- 1 ) 
i=i 

n 

i=i 

< ^[//(yo-^yi^i,^- 1 )] 

i=l 
ri 

i=l 
n 

= ^/(Wx.y*- 1 ,^;^)- (34) 



i=i 



Hence 



Ri<^I(W 1 ;Y)<I(V 1 ,V 2 ;Y). (35) 
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Also 



/(Wi;Y) = ^/(Wi^ir*- 1 ) 

1=1 

n 

1=1 

n 

i=i 

n 

1=1 

n 

= Y, l i w ^ Y w^ Y ^ Yi ~ 1 )- 



i=i 



Hence, we have 



So, we have 



The claim is proved. 



Ri<-I(W 1 ;Y) = I(V 1 ;Y,Y 1 \V 2 ) 
n 



R 1 < min{/(y 1 , V 2 ; Y), I(V i; Y, Y 1 \V 2 )}. 



(36) 



(37) 



(38) 



Appendix II 
Proof of Theorem [2] 

The proof is a combination of the coding schemes of Csiszdr et. al. [3] and the regular 
coding and backward decoding scheme in the relay channel [7], [20]. We first replace Vi,V 2 
in Theorem [2] with X\ : X 2 . After proving Theorem [2] with Vi, V 2 replaced by Xi, X 2 , we then 
prefix a memoryless channel with input Vi,V 2 and transmission probability p(xi, x 2 \vx, v 2 ) as 
reasoned in [3] to finish our proof. 
1) Codebook generation: 

For a given distribution p(xx, x 2 ), we first generate at random 2 nR i.i.d n-sequence at the 
relay node each drawn according to p(x 2 ) = nr=i P( X2 ,i), index them as x 2 (a),a G 
[l,2 nR ], where R = mm{I(X u X 2l Y)J{X 1 ;Y 1 \X 2 )} - e . For each x 2 (a), generate 
2 nR conditionally independent n-sequence x.i(k,a),k E [l,2 nR ] drawn randomly accord- 
ing to p(xi|x 2 (a)) = UtiPM x ^( a ))- Define W = {1,--- ^ R - I ^ x ^}, C = 
{!,•••, 2 nI{ - x ^ x ^} and K, = W x £ = {1, • • • , 2" H }. 
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2) Encoding 

We exploit the block Markov coding scheme, as argued in [4], the loss induced by this 
scheme is negligible as the number of blocks B — > oo. 

For a given rate pair (R u R e ) with R 1 < R and R e < R\, we give the following coding 
strategy. Let the message to be transmitted at block i be Wi(i) £ Wi = {1, • • • , M}, where 

M = 2 nRl . 

The stochastic encoder at the transmitter first forms the following mappings. 
. If R 1 > R-I(X U X 2 ; Y 2 ), then we let Wi = WxJ, where J = {!,•■■ , 2»(«i-[H-'(*i.*atfO])} - 
We let g 1 be the partition that partitions C into equal size subsets. The stochastic 
encoder at transmitter will choose a mapping for each message w±(i) = (w(i),j(i)) — > 
(w(i),l(i)), where is chosen randomly from the set gi l (j(i)) C C with uniform 
distribution. 

• If R± < R — I(X 1 , X 2 ;Y 2 ), the stochastic encoder will choose a mapping wi(i) — > 
(wi(i), where is chosen uniformly from the set C 
Assume that the message wi(i — 1) transmitted at block i — 1 is associated with (iu(i — 
1), — 1)) and the message Wi(i) intended to send at block % is associated with (w(i), 
by the stochastic encoder at the transmitter. We let a(i — 1) = (w(i — — 1)) and 

b(i) = (w(i), The encoder then sends xi(6(i), a(i — 1)). The relay has an estimation 
a(i — l) (see the decoding part), and thus sends the corresponding codeword x 2 (a(i — 1)). 
At block 1, the source sends xi(6(l), 1), the relay sends x 2 (l). 
At block B, the source sends xi(l, a(B — 1)), and the relay sends x 2 (a(B — 1)). 

3) Decoding 

At the end of block i, the relay already has an estimation of the a(i — 1), which was 
sent at block i — 1, and will declare that it receives a(i), if this is the only pair such that 
(x 1 (o(i),o(i — l)),x 2 (a(i — l)),yi(i)) are jointly typical. Since R = mm{I(X 1 ;Y 1 \X 2 ), 
7(Xi,X 2 ; Y)} - e < I(Xi, Yi|X 2 ) - C then based on the AEP, one has = a(i) with 
probability goes to 1. 

The destination decodes from the last block, i.e. block B. Suppose that at the end of block 
B — 1, the relay decodes successfully, then the destination will declare that a(B — 1) is 
received, if (xi(l,a(5 — l)),x 2 (a(S — l)),y) are jointly typical. It's easy to see that if 
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R < I(X 1 ,X 2 ;Y), we will have a(B — 1) = a(B — 1) with probability goes to 1, as n 
increases. 

After getting a(B — 1), the receiver can get an estimation of a{i),i £ [1,-8 — 2] in a similar 
way. 

Having a(i — 1), the destination can get the estimation of the message wi(i — 1) by letting 

1) w^i - 1) = (w(i - - 1)) = (w(i - l), gi (l(i - 1))) if R! > R - I(X U X 2 ; Y 2 ), 

2) w^i - 1) = w(i - 1) if R ± < R - I(X 1 ,X 2 ; Y 2 ). 

The probability that ihi(i — 1) = wi(i — 1) goes to one for sufficiently large n. 
4) Equivocation Computation 

H(W 1 \Y 2 ) = H(W U Y 2 ) - H(Y 2 ) 

= H(W U Y 2 , X 1; X 2 ) - H(X 1 , X 2 \W ± ,Y 2 ) - H(Y 2 ) 

= H(X 1} X 2 ) + H(W!, Y 2 |X 1; X 2 ) - #(X 1; X 2 | Wi, Y 2 ) - if (Y 2 ) 

> fT(X 1 ) + ^(Y 2 |X 1 ,X 2 )- J ff(X 1 ,X 2 |W 1 ,Y 2 )-fr(Y 2 ). (39) 

First, let us calculate if(X 1 ,X 2 |Wi, Y 2 ). Given W l5 the eavesdropper can also do back- 
ward decoding as the receiver. At the end of block B, given W±, the eavesdropper knows 
w(B - 1), hence it will decode l(B - 1), by letting l(B - 1) = l(B - 1), if l(B - 1) is the 
only one such that (x^l, (w(B - 1)J(B - l))),x 2 ((w(B - 1)J(B - l))),y) are jointly 
typical. Since I e [1, 2 nI( - Xl ' Xr ' Y ^], we have 

Pr{(X 1 (l,a(2-l)),X 2 (a(^-l))) 

^ (Xx(l, (w(B - 1), l(B - l))),X 2 ((w(B - 1), l(B - 1))))} < Cl . (40) 

Then based on Fano's inequality, we have 

-HpL^lW^wuYt) <- + e 1 I(X 1 ,X 2 ;Y 2 ) (41) 
n n 

Hence, we have 

-H(X 1 ,X 2 \W 1 ,Y 2 ) = - V p(W 1 = w 1 )H(X 1 ,X 2 \W 1 = w 1 ,Y 2 )<e 2 , (42) 
n n 

when n is sufficiently large. 

Since the channel is memoryless, we have H(Y 2 )—H(Y 2 \X 1 , X 2 ) < nI(X 1: X 2 ; Y 2 )+n8 n , 
where 5 n — > 0, as n — > oo [2]. 
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Now, from the code construction, we have H(X.i) = nR if R x > R—I(X 1 ,X 2 \ Y 2 ). In this 
case, we get nR e = H{W l \Y 2 ) > n(R - I{X l ,X 2 ; Y 2 ) - e 3 ). If Rt < R - I(X 1 , X 2 ; Y 2 ), 
iJ(Xi) = n(_Ri + I(Xi, X 2 ; Y 2 )), in this case, we get the perfect secrecy, since 

nR e > n(Ri + I(X U X 2 ; Y 2 )) - nI{X 1 ,X 2 ; Y 2 ) - ne 3 > n(R 1 - e 3 ). 

The claim is proved. 

Appendix III 
Proof of Theorem [3] 

As [3], we first prove the result for the case where Vi,V 2 in Theorem [3] are replaced with 
Xi,X 2 , then prefix a memoryless channel with transition probability p(xi\vi)p(x 2 \v 2 ) to finish 
our proof. 

We first consider the case I{X\\ Y\X 2 ) < I{X\\ Y 2 \X 2 ), i.e., the channel between the source 
and the eavesdropper is better than the channel between the source and the destination. In this 
case, we only need to consider mm{I(X 2 ; Y), I(X 2 ; Y 2 )} = I(X 2 ;Y 2 ), otherwise, the secrecy 
rate will be zero. Thus in this case, the last equation in © changes to R e < \I{X X \ Y\X 2 ) + 
min{/(X 2 ; Y), I(X 2 ; Y 2 \X X )} - I(X 1 , X 2 ; Y 2 )] + . 

1) Codebook generation: 

For a given distribution p(xi)p(x 2 ), we generate at random 2 nR2 i.i.d n-sequence at the 
relay node each drawn according to p(x 2 ) = \~\^ = iP{x 2yi ), index them as x 2 (a),a 6 
[1, 2 nR2 }, where we set R 2 = mm{I(X 2 ; Y), I(X 2 ; Y 2 \X X )} — e. We also generate random 
2 nR i.i.d n-sequence at the source each drawn according to p(x x ) = \~[™ =1 p(xi t i), index 
them as xi(Jfc), k G [1, 2 nR ], where R = I{X X ] Y\X 2 ) - e. Let 

R' = min{/(X 2 ; Y), I(X 2 ; Y 2 \X X )} + I{X x] Y\X 2 ) - I(X h X 2 ; Y 2 ), 

and define W = {!,-■■ ,2 nR '}, C = {!,■■■ ,2"^^')} and K = W x C = {1, ■ ■ ■ ,2 nR }. 

2) Encoding 

For a given rate pair (R 1 ,R e ) with R x < R, R e < R x , we give the following coding 
strategy. Let the message to be transmitted at block i be w x (i) E Wi = [1,M], where 
M = 2 nR \ 

The stochastic encoder at the transmitter first forms the following mappings. 
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. If Ri > R', then we let Wi = W x J, where J = {1, 2< Rl -*')}. We let 5l be the 
partition that partitions £ into \J\ equal size subsets. The stochastic encoder at trans- 
mitter will choose a mapping for each message wi(i) = (w(i),j(i)) — > (w(i),l(i)), 
where is chosen randomly from the set g^OW) c £ w i m uniform distribution. 
• If Ri < R' , the stochastic encoder will choose a mapping Wi(i) — > (u>i(i), where 
Z(i) is chosen uniformly from the set C. 
Suppose the message w\{i) intended to send at block % is associated with (w(i),l(i)) by 
the stochastic encoder at the transmitter. The encoder then sends x 1 ((w(i), The relay 

uniformly picks a code x 2 (a) from a e [1, • • • , 2 nR2 ], and sends x 2 (a). 

3) Decoding 

At the end of block i, the destination declares that a(i) is received, if a(i) is the only one 
such that (x 2 (a(«)), y) are jointly typical. If there does not exist or there exist more than one 
such sequences, the destination declares an error. Since R 2 = min{f (X 2 ; Y), I(X 2 ; Y 2 \Xi)}— 
e < I(X 2 ; Y) — e, then based on AEP, we know that the error probability will be less than 
any given positive number e, when the codeword length n is long enough. 
The destination then declares that k is received, if k is the only one such that (xi(fc), x 2 (a), y) 
are jointly typical, otherwise declares an error. Since R = I(X 1 ;Y\X 2 ) — e, then based 
on AEP, we know that we will have error probability goes to zero, when n is sufficiently 
large. 

Having k(i), the destination can get the estimation of the message w\(i) by letting 

1) w^i) = {w(i),j(i)) = (w(i),Pi(Z(i))), if Ri > R' , 

2) wi(i) = w(i), if R l < R'. 

The probability that w±(i) = wi(i) goes to one for sufficiently large n. 

4) Equivocation Computation 

H{W 1 \Y 2 ) = H{W 1 ,Y 2 )-H{Y 2 ) 

= H(W U Y 2 , X 1; X 2 ) - if (X ls X 2 | W u Y 2 ) - H (Y 2 ) 

= H(X ± , X 2 ) + ff (Wx, Y 2 |X 1; X 2 ) - ff (X 1; X 2 | Wx, Y 2 ) - ff(Y 2 ) 

> ff(X 1 ,X 2 ) + ff(Y 2 |X 1 ,X 2 )-ff(X 1 ,X 2 |W 1 ,Y 2 )-ff(Y 2 ). (43) 

Now let's calculate ff (Xi, X 2 | W 1; Y 2 ). Given W^i, the eavesdropper can do joint decoding. 
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At any block i, given W±, the eavesdropper knows w(i), hence it will decode and a(i) 
sent by the relay, by letting = a(i) = a(i), if a(i) are the only one such that 

(xi(to(i),/(i)),x 2 (a(i)),y) are jointly typical. Then, since R 2 = mm{I(X 2 ;Y), I(X 2 ;Y 2 \Xi)} — 
e < J(X 2 ;y 2 |^i) - e, we get 

^log 2 (|£|) + i22 = R + I(X 1 ,X 2 ;Y 2 ) -mm{I(X 2 ;Y),I(X 2 ;Y 2 \X 1 )} 

-7(X i; Y|X 2 ) + min{7(X 2 ; Y), J(X 2 ; y 2 |Xx)} - e 
< J(X 1} X 2 ;Y 2 )-e, (44) 

Also, we have \ log 2 (|£|) < R < I{X X - Y 2 \X 2 ) - e. 

So Pr{(X 1 («;(i),Z(i)),X 2 (a(i))) ^ (Xx(«;(i), Z(i)),X 2 (a(i)))} < Cl . 

Then based on Fano's inequality, we have 

-H(Tt 1 ,X. 2 \W 1 = w 1 ,Y 2 ) <- + e 1 I(X 1 ,X 2 ;Y 2 ) (45) 
n n 

Hence, we have 

-H(X 1 ,X 2 \W 1 ,Y 2 ) = - V p(W 1 = «; 1 )^(X 1 ,X 2 |W 1 = ii; 1 ,Y 2 )<e 2 , (46) 
n n <—? A , 

when n is sufficiently large. 

Now, H(Y 2 ) - H(Y 2 \X!, X 2 ) < n/(Xi, X 2 ; Y 2 ) + n<5„, where 5 n -> 0, as n -> oo. 
Also we have 77(Xi, X 2 ) = 77(Xi) + 77(X 2 ) since xi and x 2 are independent. If i?i > i?', 
we have77(X 1; X 2 ) = i?+# 2 = I(X 1 ;Y\X 2 )+min{I(X 2 ;Y)J(X 2 ;Y 2 \X 1 )}. Combining 
these, we get nR e = ff(Wi|Y 2 ) > n(min{7(X 2 ; Y),I(X 2 ; Y 2 \Xi)} + 7(X i; F|X 2 )) - 
nI(Xi,X 2 \ Y 2 ) - nt 4 . 

On the other hand, if 7^ < R', we have 77(Xx) = i2i+/(Xi, X 2 ; y 2 )-min{7(X 2 ; Y), I(X 2 ; Y 2 |Xi)}, 
hence we have 77(X 1 ,X 2 ) = R± + 7(X L ,X 2 ;Y 2 ) — e- We get perfect secrecy rate, since 
nR e = H(W! | Y 2 ) > ni?i - ne 4 . 
This case is proved. 

Now, consider the case J(X i; Y|X 2 ) > 7(X i; Y 2 |X 2 ). If min{7(X 2 ; Y), 7(X 2 ; Y 2 )} = I(X 2 ;Y), 
then we have min{7(X 2 ; Y),I(X 2 ; Y 2 \Xi)} = I(X 2 ;Y), because 7(X 2 ;Y 2 |X 1 ) > 7(X 2 ;Y 2 ) 
since Xi,X 2 are independent. Under this case, we only need to prove R e < I(Xi,Y\X 2 ) — 
I(Xi, Y 2 \X 2 ) are achievable, which can be achieved by letting the codeword rate be I(Xi, Y\X 2 ) 
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and R' = I(Xi, Y\X 2 ) — I(Xi, Y\X 2 ). Now the equivocation rate of the eavesdropper can be 
calculated as 

H{W 1 \Y 2 ) > ff(Wi|Y 2 ,X 2 ) 

= H(W 1} Y 2 \X 2 ) - H(Y 2 \X 2 ) 

= H(W U Y 2 , Xi|X 2 ) - H(X, | W 1; Y 2 , X 2 ) - #(Y 2 |X 2 ) 

= if(Xi|X 2 ) + Y 2 |Xi,X 2 ) - if(Xi|Wi, Y 2 ,X 2 ) - #(Y 2 |X 2 ) 

> fr(Xi) + fl-(Y 2 |X 1 ,X 2 )-fr(Xi|Wi,Y 2 ,X 2 )- J ff(Y 2 |X 2 ), (47) 

since xi,x 2 are independent. This can then be shown to be larger than n(I(Xi,Y\X 2 ) — 
7(X i; Y 2 |X 2 )-e). 

If min{/(X 2 ; Y),I(X 2 ; Y 2 )} = I(X 2 ; Y 2 ), the last line in © changes to R e < [l(X 1 ; Y\X 2 ) + 
min{I(X 2 ;Y), I(X 2 ;Y 2 \Xi)} — I(Xi, X 2 ; Y 2 )] + , then we can use a coding/decoding scheme 
similar to the one developed above to show the achievability. 

The claim is achieved. 

Appendix IV 
Proof of Theorem [4] 

The proof is a combination of the coding scheme of Csiszdr et. al. [3] and a revised CF 
scheme in the relay channel [4]. 
1) Codebook generation: 

We first generate at random 2 nR i.i.d n-sequence Xi at the source node each drawn accord- 

n 

ing top(xi) = [] p{x ld ), index them as Xi(fc), k G [l,2 nR ], with R = I(X 1 \ Y 1 ,Y\X 2 )-e. 

3=1 

n 

Generate at random 2 nR2 i.i.d n-sequence x 2 each with probability p(x 2 ) = Yl P{ x 2,j)- 

3=1 

Index these as x 2 (s),s G [l,2 n - R2 ], where 

R 2 = mm{I{X 2 - Y), I(X 2 ; Y 2 \X X )} - e. 

For each x 2 (s), generate at random 2 n ^ R2 ~ Ro ' i.i.d yi, each with probability p(yi|x 2 (s)) = 
Yl p(yi,j\x 2 ,j(s)). Label these y x {z,s),z G [l,2 nR ],s G [l,2 ni?2 ], where we set R = 

R 2 — Rq. Equally divide these 2 nR2 x 2 sequences into 2 nR bins, hence there are 2 nRo x 2 
sequences at each bin. Let / be this mapping, that is z = f(s). 
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Let R' = mm{I(X 2] Y), I(X 2 ; Y 2 \X{)} + I{X X - Y u Y\X 2 ) - I(X 1 , X 2 ; Y 2 ). 

Define W = {1, ■ ■ ■ ,2 nR '}, C = {!,-■■ ,2"^"^')} and K = W x C = {1, • • • ,2 nR }. 

2) Encoding 

We exploit the block Markov coding scheme. 

For a given rate pair (R 1 ,R e ), where Ri < R, R e < R\, we give the following coding 
strategy. Let the message to be transmitted at block i be W\(i) G Wi = [1,M], where 
M = 2 nR \ We require R x < R. 

The stochastic encoder at the transmitter first forms the following mappings. 
. lfR l >R', we let W 1 = WxJ, where J = {1, 2 n ^- R '^}. We let g x be the partition 
that partitions C into \J\ equal size subsets. The stochastic encoder at transmitter will 
choose a mapping for each message w\(i) = (w(i),j(i)) —> (w(i),l(i)), where is 
chosen randomly from the set gi l (j(i)) C C with uniform distribution. 
• If R\ < R' , the stochastic encoder will choose a mapping w\(i) — > (wi(i), /(«)), where 
is chosen uniformly from the set C. 
At first consider block i, where i ^ 1, B, which means it's not the first or the last block. 
Assume that the message W\(i) intended to send at block i is associated with (w(i),l(i)) 
by the stochastic encoder at the transmitter. We let k(i) = (w(i), Then the encoder at 
the source sends xi(fc(£)) at block i. At the end of block i — 1, we assume that (x. 2 {s(i — 
l)),yx(z(i — l),s(i — l)),yi(i — 1)) are jointly typical^, then we choose s(i) uniformly 
from bin z(i — 1), and the relay sends x 2 (s(i)) at block i. 

When i = l, the source sends xi(/c(l)), the relay sends x 2 (l). When i = B, the source 
sends Xi(l), the relay sends x 2 (s(B)). 

3) Decoding 

First consider the relay node. At the end of block i, the relay already has s(ijf[ it then 
decides z(i) by choosing z(i) such that (x 2 (s(z)),yx(z(z),s(i)),yi(i)) are jointly typical. 
There exists such z(i), if 

£>i(n;n|x 2 ), (48) 

and n is sufficiently large. Choose s(« + 1) uniformly from bin z(i). 

4 See the decoding part, such z(i — 1) exists. 

5 At the end of block 1, relay knows s(i) = 1, this is the starting point. 
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The destination does backward decoding. The decoding process starts at the last block B, 
the destination decodes s(B) by choosing unique s(B) such that (x 2 (s(_B)), y(-B)) are 
jointly typical. We will have s(B) = s(B), if 

R 2 <I(X 2 ;Y), (49) 

and n is sufficiently large. 

Next, the destination moves to the block B — 1. Now it already has s(B), hence we also 
have z(B — 1) = f(s(B)). It first declares that s(B — 1) is received, if s(B — 1) is the 
unique one such that (x 2 (s(J5 — l)),y(B — 1)) are jointly typical. If (|49l) is satisfied, 
s(B — 1) = s(B — 1) with high probability. After knowing s(B — 1), the destination 
gets an estimation of k(B — 1), by picking the unique k(B — 1) such that (jcx(k(B — 
l)),yi(«(S - l),s(-B - l)),y(S - l),x 2 (a(B - 1))) are jointly typical. We will have 
fc(S-l) = fc(S-l) with high probability, if 

HX^YlXz), (50) 

and n is sufficiently large. 

When the destination moves to block i, the destination has s(i+l) and hence z(i) = f(s(i+ 
1)). It first declares that s(i) is received, by choosing unique s(i) such that (x 2 (s(z)), y(z)) 
are jointly typical. If (l49l) is satisfied, s(i) = s(i) with high probability. After knowing 
s(i), the destination declares that k(i) is received, if k(i) is the unique one such that 
(xi(fc(i)),yi(z(i), s(i)), y(i),x 2 (s(z))) are jointly typical. If ((501) is satisfied, fc(z) = k(i) 
with high probability when n is sufficiently large. 

Having k(i), the destination can get the estimation of the message W\(i) by letting 1) 
ti x (j) = (w(i),j(i)) = (w(i), gi (i(i))), if R x > R-R', 2) w x {i) = w(i), if R\ < R-R'. 
The probability that w\{i) = W\(i) goes to one for sufficiently large n. 
4) Equivocation Computation 

H{W 1 \Y 2 ) = H{W 1 ,Y 2 )-H(Y 2 ) 

= H(W 1 ,Y 2 , X ls X 2 ) - ff(X 1; X 2 | W u Y 2 ) - H(Y 2 ) 

= fT(X!, X 2 ) + ^(Wi, Y 2 |X!, X 2 ) - H(X ls X 2 |Wi, Y 2 ) - H(Y 2 ) 

> H(X 1 ,X 2 )+ J ff(Y 2 |X 1 ,X 2 )-ff(X 1 ,X 2 |Wi,Y 2 )- J ff(Y 2 ). (51) 
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Following [2], we will have H(Y 2 ) - H(Y 2 \X 1 ,X 2 ) < nI(X 1 , X 2 ;Y 2 ) + n8 n , where 
5 n — > as n — > oo. 

Now let's calculate H(Xi, X 2 | Wi, Y 2 ). Given W ls the eavesdropper can do joint decoding. 
It does backward decoding. We pick up the story at block i, we suppose it already decodes 
s(i + 1) and hence z(i) = f(s(i + 1)). Given W 1 , the eavesdropper knows w(i), hence it 
will decode and s(i) sent by the relay, by letting = l(i),s(i) = s(i), if l(i),s(i) 
are the only ones such that (xi(w(i)/l(i)),x 2 (s(i)),yi(z(i), s(i)),y 2 (i)) are jointly typical. 
Then, if R 2 < I(X 2 ; Y 2 \Xi) and (l50l) is satisfied, we have 

Uog 2 (\£\) + R 2 = R-R' + R 2 

= R - mm{I(X 2 ; Y),I(X 2 ; Y 2 \X X )} - /(X i; Y h Y\X 2 ) 

+I{X h X 2 ; Y 2 ) + min{/(X 2 ; Y),I(X 2 ; Y 2 \X 1 )} 

< I(X 1 ,X 2 ;Y 2 ). (52) 



Also, we have 



l ~\og 2 {\C\)<R<I{X x -Y x ,Y 2 \X 2 ). 



Thus, we have 

Pr{(Xi(«;(i),Z(i)),X 2 (S(i))) + (X^i), X 2 (s(i)))} < £l . (53) 

Then based on Fano's inequality, we have 

ifT(X 1 ,X 2 ,|W 1 = ti; 1 ,Y 2 ) < - + e 1 /(X 1 ,X 2 ;y 2 ). (54) 
n n 

Hence, we have 

-H(X lt X. 2 \W 1 ,Y 2 ) = - V p(W 1 = w 1 )H(X 1 ,X 2 \W 1 = w 1 ,Y 2 )<e 2 , (55) 

UllGWl 

when n is sufficiently large. 

We know #(X 1; X 2 ) = H(X 1 ) + H(X 2 \X 1 ) > n(R + R ). 
If Ri > R' , we have H(Xi) = nR, then we get 

nR e = H(W 1 \Y 2 ) > n(R + I(X l] Y u Y\X 2 ) - J(X ls X 2 ; Y 2 ) - e 4 ). 

If R x < R', we have ff(Xi) = n(i?i + i? - i?'), hence 

ni? e = H(W^|Y 2 ) > raifc + n(R - min{/(X 2 ; Y), I(X 2 ; Y 2 |Xi))} - e 4 ). 

The claim is proved. 
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Appendix V 
Proof of Theorem [5] 

The proof follows closely with that of Theorem [3] We first consider the case I(X X ; Y\X 2 ) < 
I(X X ;Y 2 \X 2 ), i.e., the channel between the source and the eavesdropper is better than the 
channel between the source and the destination. In this case, we only need to consider the 
case min{J(X 2 ; Y), I(X 2 ; Y 2 )} = I(X 2 ;Y 2 ), otherwise, the perfect secrecy rate will be zero. 
Thus in this case, R al = [l(X x ; Y\X 2 ) + min{J(X 2 ; Y), I(X 2 ; Y 2 \X X )} - I(X 1 , X 2 ; Y 2 )] + . 

1) Codebook generation: 

For a given distribution p(x x )p(x 2 ), we generate at random 2 nR2 i.i.d n-sequence at the 
relay node each drawn according to p(x 2 ) = YYi=iP( x 2,i)^ index them as x 2 (a),a G 
[1, 2 nR2 }. Here we set R 2 = mm{I(X 2 ; Y),I(X 2 ; Y 2 \X X )} - e. We also generate random 
2 nR i.i.d n-sequence at the source each drawn according to p(xi) = Yii=i P( x i,i)> index 
them as xi(fc), k G [1, 2 nR ] with R = I(X X \ Y\X 2 ) - e. Let 

Rmin = min{i? sl , R s2 }, R ma x = max{i? sl , R s2 }, 

where R sl = mm{I(X 2 ; Y), I(X 2 ; y 2 |X 1 )}+/(X 1 ; Y\X 2 )-I(X h X 2 ; Y 2 ), R s2 = I(X l ; Y\X 2 )- 
I{X X ] Y X \X 2 ). We now define W = {1, • • • , 2" R ™™}, C x = {1, • • • , 2 n ( R — C 2 = 
{1, ■ • • , 2 n( - R - R ^} and C = C x x £ 2 , K = W x C. 

2) Encoding 

Here, we consider perfect secrecy rate. For a given rate R x < Rmin, we give the following 
coding strategy to show that for any given e > 0, the equivocation rate at the eavesdropper 
and the relay node can be made to be larger or equal R x — e . 

Let the message to be transmitted at block i be w x (i) G W x = [1,M], where M = 
2 nRl . The stochastic encoder will choose a mapping w x (i) — > (w x (i),l x (i),l 2 (i)), where 
h(i), l 2 (i) are chosen uniformly from the set C x , C 2 respectively. We write l(i) = (l x (i), h{i))- 
Suppose the message w x (i) intended to send at block % is associated with (w(i),l(i)) by 
the stochastic encoder at the transmitter. The encoder then sends x x ((w(i), The relay 

uniformly picks a code x 2 (a) from a G [1, • • • , 2 nR2 }, and sends x 2 (ct). 

3) Decoding 

At the end of block i, the destination declares that a{i) is received, if a(i) is the only one 
such that (x 2 (a(z)),y) are jointly typical. If there does not exist or there exist more than one 
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such sequences, the destination declares an error. Since R 2 = min{/(X 2 ; Y), I(X 2 ; Y 2 \Xi)} — 

e < I(X 2 ; Y) — e, then based on AEP, we know that the error probability will be less than 

any given positive number e, when the codeword length n is long enough. 

The destination then declares that k is received, if k is the only one such that (x^fc), x 2 (a), y) 

are jointly typical, otherwise declares an error. Since R = I(Xi,Y\X 2 ) — e, then based 

on AEP, we know that we will have error probability goes to zero, when n is sufficiently 

large. 

Having k(i), the destination can get the estimation of the message Wi(i) by letting Wi(i) = 
w(i). The probability that w\(i) = wi(i) goes to one for sufficiently large n. 
4) Equivocation Computation 

We first calculate the equivocation rate of the eavesdropper when < R s2 . 

#(Wi|Y 2 ) = H(W 1 ,Y 2 )-H(Y 2 ) 

= H(W U Y 2 , X 1; X 2 ) - H(X 1 , X 2 | W u Y 2 ) - H(Y 2 ) 

= H(X 1 ,X 2 ) + H(W 1 ,Y 2 \X 1 ,X 2 ) - H(X 1 ,X 2 \W 1 ,Y 2 ) - H(Y 2 ) 

> H(X 1 ,X 2 ) + H(Y 2 \X 1 ,X 2 )-H(X 1 ,X 2 \W 1 ,Y 2 )-H(Y 2 ). (56) 

Now let's calculate H(Xi, X 2 | W\, Y 2 ). Given W\, the eavesdropper can do joint decoding. 
At any block i, given Wi, the eavesdropper knows w(i), hence it will decode = 
(h(i) , h{i)) and a(i) sent by the relay, by letting = l(i),a(i) = a(i), if l(i),a(i) are 
the only one pair such that (xi(«;(i), x 2 (a(i)), y) are jointly typical. Since R 2 = 
mm{I(X 2 ; Y), I(X 2 ; Y 2 \X X )} - e < I(X 2 ; Y 2 \X,) - e, we 

^logad^D + i^ = R + I(X 1 ,X 2 ;Y 2 )-mm{I(X 2 ;Y),I(X 2 ;Y 2 \X 1 )} 

-J(X i; Y\X 2 ) + mm{I(X 2 ; Y),I(X 2 ; Y 2 \Xi)} - e 
< I{X u X 2 -Y 2 )-e. (57) 

Also, we have ±log 2 (|£|) < R < I{X X ] Y 2 \X 2 ). 

So Pr{(X 1 («;(i),f(i)),X 2 (o(i))) + (X 1 (w(i),l(i)),X 2 (a{i)))} < d- 
Then based on Fano's inequality, we have 

-^(X^XalWi = wi,Y 2 ) <- + e 1 I(X 1 ,X 2 ;Y 2 ). (58) 
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Hence, we have 

-H(X 1 ,X 2 \W 1 ,Y 2 ) = - V p(W 1 = w 1 )H(X 1 ,X 2 \W 1 = w 1 ,Y 2 )<e 2 , (59) 
n n 

when n is sufficiently large. 

Now, H(Y 2 ) - H(Y 2 \X U X 2 ) < ra/(Xi, X 2 ;F 2 ) + n<5 n , where 5 n -> 0, as ra -> oo. 
Also we have H(Xi,X 2 ) = H(X 1 ) + H(X 2 ) since x x and x 2 are independent. Now 
if (Xx) =R 1 + I(X 1 , X 2 ; Y 2 ) - min{/(X 2 ; Y), I(X 2 ; Y 2 \X ± )}, hence H(X 1 , X 2 ) = ^ + 
7(X 1 ,X 2 ;y 2 )-e. 

We get nR e = H{W 1 \Y 2 ) > nRi - ne A . 
Now we calculate the equivocation rate at the relay node. 

H{W l \Y l ,X 2 ) > HiW^Y^X^U) 

= H(W 1 ,Y 1 ,L 1 \X 2 )-H(Y 1 ,L 1 \X 2 ) 

= H(W U L 1} Y ls Xx|X 2 ) - H{X 1 \W l , L U Y X , X 2 ) - if (Y 1; L,\X 2 ) 

= H(X 1 \X 2 ) + H(W 1 ,L 1 ,Y 1 \X 1 ,X 2 ) - H(X 1 \W 1 ,L 1 ,Y 1 ,X 2 ) - H(Y 1 ,L 1 \X 2 ) 

> H(X 1 ) +H(Y 1 \X 1 ,X 2 ) - H(X 1 \W 1 ,L 1 ,Y 1 ,X 2 ) - ff^) - if^X,), 

where the first term of (a) comes from the fact that x x , x 2 are independent, and the fourth term 
comes from the fact that l x , x 2 are independent. 

Now, H(L l )=n(R max -R mm ), H(Y l \X l , X 2 ) - if^X,) < nI(X l ;Y l \X 2 ) +nS n . Given 
wi, li, x 2 , the relay can just choose the xi in the bin (wi, h) which is jointly typical with x 2 , yi. 
Since \ log 2 (|£ 2 |) < I{X X - Y X \X 2 \ we have Pr{X x ^ X,} < e 2 . 

Then based on Fano's inequality, we have 

-#(Xx| W 1 = w 1 ,L 1 = l 1 ,Y 1 ,X 2 = y: 2 )<- + e 1 I(X 1 ; Y,\X 2 ), (60) 
n n 

Hence, we have 

< e 2 , (61) 



n n 

w 1 ,l 1 ,x 2 



when n is sufficiently large. 

Also, based on the encoding part, we have H(X 1 ) = n(R 1 + I{X 1 \ Y\X 2 ) — R min ). 
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Combining these, we get 



H(W 1 \Y 1 ,X 2 ) > n(R 1 + I{X 1 ;Y\X 2 )-R min -{R ma ^-R min )-I{X l ;Y l \X 2 )-5 n ) 



The equivocation rate of the relay and the eavesdropper when Ri s > R 2s can be calculated 
similarly, with the only difference that we bound the equivocation rate of the eavesdropper by 
giving it L\. This case is proved. 



Now, consider the case I{Xx-Y\X 2 ) > I(X 1 ;Y 2 \X 2 ).lfmm{I(X 2 ;Y),I(X 2 ;Y 2 )} = I{X 2 ;Y), 
then we have mm{I(X 2 ; Y),I(X 2 ; Y 2 \Xi)} = I(X 2 ;Y), because I{X 2 -Y 2 \X X ) > I{X 2 ;Y 2 ) 



proving (1471) . If mm{I(X 2 ;Y), I(X 2 ;Y 2 )} = I(X 2 ;Y 2 ), and we only need to consider i? sl = 

Y\X 2 )+mm{I(X 2 ; Y), I(X 2 ; Y 2 \X{)}-I{X U X 2 ; Y 2 )] \ then we can use a coding/decoding 
scheme similar to the one developed above to show the achievability. 
The claim is achieved. 
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